Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/52f802c8-23f9-3646-8ec5-b6393f166986.roa
File:                     52f802c8-23f9-3646-8ec5-b6393f166986.roa (raw, json)
Hash identifier:          ttzwEF9kc+tbkRQxH/UhjtPIFFmu/HU/JSFxfCY1TAM=
Subject key identifier:   35:01:7E:FC:6C:C0:92:00:66:AE:8D:AE:A7:8F:B9:8D:F9:68:14:B8
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858402A5B9C0A566DE8BA2D9D3480
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/52f802c8-23f9-3646-8ec5-b6393f166986.roa
Signing time:             Wed 07 Dec 2022 12:00:00 +0000
ROA not before:           Wed 07 Dec 2022 12:00:00 +0000
ROA not after:            Thu 12 Jan 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        56.79.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:2a:5b:9c:0a:56:6d:e8:ba:2d:9d:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec  7 12:00:00 2022 GMT
            Not After : Jan 12 05:00:00 2023 GMT
        Subject: CN=57015854-783c-4ab0-888b-115af5c7f719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cb:8c:12:af:2a:7f:d4:84:f0:73:3e:c1:72:
                    b8:dc:27:ef:7d:df:29:8b:50:ef:07:38:94:70:a0:
                    32:68:c1:9c:9f:51:0b:03:bb:b4:11:72:bf:9e:d2:
                    d3:83:5f:86:0b:b4:6e:53:2c:7f:44:ff:d9:27:69:
                    13:1a:6a:e3:08:ba:d9:6a:fe:31:9c:35:29:c2:12:
                    ac:ba:19:7b:b9:76:4c:da:a5:65:9e:22:e9:b5:26:
                    6e:f3:6f:20:4d:c1:d3:aa:91:7a:3a:94:96:69:de:
                    a6:a1:ad:a6:2a:e1:cd:ca:67:3b:da:a4:58:e3:0e:
                    f0:71:0f:35:35:90:d9:87:16:3c:31:ce:89:2d:32:
                    c5:de:bf:a5:f1:17:e8:dc:a1:0b:3a:41:9d:b7:36:
                    57:97:99:69:82:70:4f:ca:5a:e0:95:f1:eb:04:f3:
                    62:e7:93:0c:49:77:10:a1:1d:3e:32:d8:1a:b1:cd:
                    91:13:80:36:73:0d:54:3e:59:28:4d:47:1f:61:5a:
                    84:a1:e7:9c:75:0e:a0:51:31:70:83:6c:98:1b:ca:
                    99:78:81:df:98:1d:c9:42:5f:11:12:80:78:f9:bc:
                    28:c5:3e:ea:6f:fa:46:7b:1e:63:25:66:ee:2d:ca:
                    ad:c6:b9:f0:e7:2f:01:df:59:08:23:3b:02:d2:a9:
                    10:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:01:7E:FC:6C:C0:92:00:66:AE:8D:AE:A7:8F:B9:8D:F9:68:14:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/52f802c8-23f9-3646-8ec5-b6393f166986.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  56.79.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:d7:23:4a:0d:37:b1:65:d9:20:f5:3f:65:7b:00:ea:4a:15:
         7d:ee:3e:ec:d4:85:42:bb:46:4e:5e:d1:4b:d8:59:42:1b:60:
         0a:f8:56:16:07:27:1c:db:1f:78:bb:bc:54:6d:c8:09:75:d3:
         9a:e4:b6:29:1c:9d:59:31:03:38:63:23:dc:88:d9:63:45:e9:
         fa:16:c4:d2:69:ec:23:44:92:45:d7:a7:ac:cd:fb:da:a3:c3:
         23:aa:0c:85:30:d2:80:1c:4b:c2:a6:c3:c4:64:db:ae:5c:0d:
         f4:64:f7:02:88:12:20:89:ae:c9:ef:48:85:3c:1e:88:72:3b:
         0c:fc:04:91:05:2a:9e:0c:16:82:ef:92:1e:ed:6d:65:72:9f:
         85:6a:5d:bd:e9:07:7b:44:2b:bf:54:13:4f:45:e5:71:64:d6:
         bd:e8:51:e2:c7:9f:da:bd:db:52:8f:80:58:0a:fe:65:90:bf:
         3d:8b:44:c0:4e:dd:a1:52:12:c5:94:d8:60:4d:9e:52:5f:d4:
         32:a2:ef:38:5d:fd:20:a7:9b:f1:56:20:3b:df:89:28:2e:92:
         7b:a2:59:fa:68:80:28:e9:6a:6b:6f:24:aa:ed:6c:09:a7:b8:
         0d:be:62:37:00:72:41:b4:98:52:e4:d3:b3:da:64:b6:ad:5c:
         df:85:d8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:44 2025 by rpki-client